PT-2010-1615 · Digital Interchange · Digital Interchange Document Library

Byalbayx · Published 2010-04-23 · Updated 2017-09-19 · CVE-2009-4806

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Digital Interchange Document Library version 1.0.1

Description The issue concerns a lack of administrative authentication in the admin/save user.asp file, allowing remote attackers to access or modify the administrator's credentials.

Recommendations For Digital Interchange Document Library version 1.0.1, consider implementing proper administrative authentication mechanisms to restrict access to sensitive areas like admin/save user.asp. As a temporary workaround, restrict access to the admin/save user.asp file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-4806

Affected Products

Digital Interchange Document Library

References · 6

• 🔥 http://exploit-db.com/exploits/8130 · Exploit
• 🔥 https://exploit-db.com/exploits/8130 · Exploit
• http://secunia.com/advisories/34129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4806 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49018 · Note
• http://securityfocus.com/bid/33983 · Note